Windows 10: TROJAN IN winpese-x86-14393_17.01.16.iso'

HI TRYING AGAIN
I downloaded winpese-x86-14393_17.01.16.iso' from here and Avira antivirus flagged
it as hiding a Trojan I have deleted it but.a false positive?
Ay help much appreciated


:)

 

Recovering Files

You could try a bootable media like WinPESE:

Win10586PESE-x64

As long as the Partition is still intact and the data is not encrypted you should be able to do what you are looking for.

 

a trojan via the official MediaCreationTool tool is that possible ?

Hi again. Just wanted to add that I tried creating a standalone x64 USB installer with a fresh copy of the Media Creation Tool and everything ran to completion without issue. However, when creating a combined x64/x86 USB installer, sure enough Defender popped
up again with a Trojan warning. Same thing with creating another standalone x86 USB installer. But creating another standalone x64 USB installer right afterwards again showed nothing.

When the Media Creation Tool is downloading the files necessary for creating the x86 install media, Defender is happy. However, shortly after the tool begins the final step of actually writing the installation files to media (whether ISO or USB), Defender
suddenly throws a fit.

Looks like Defender doesn't like something about the x86 installation files the media tool writes to ISO/USB. As a result, both standalone x86 and combined x64/x86 install media is affected.

Fortunately, standalone x64 media is fine.

 

Hi.
Is that the Kyhi rescue media you're referring to? If so, yes that would be a false positive. I just downloaded it last week, and ESET said it was fine.

You can always upload it to virustotal.com for scanning to verify.

 

The iso is too big to be uploaded to virustotal but it seems to be a false positive. I downloaded the latest version and has been using it without issues.

 

Thanks guys
I thought it must be but wanted to be sure
once again many thanks

 

Cheers Brummy. *Thumbs